PolyPatch malware family
PolyPatch is a malware family tracked by MalwareAnalyzer by Cyble across 3 publicly analyzed samples. First seen 2026-08-09, most recently 2026-08-18. Observed ATT&CK techniques include T1105, T1112.
Corpus statistics
- Publicly analyzed samples: 3
- First seen: 2026-08-09
- Last seen: 2026-08-18
- Verdicts: malicious 3
- File types: pe 3
ATT&CK techniques used by PolyPatch
Recent PolyPatch samples
- BRBHSPSUYS.exe - malicious (2026-08-18)
- 7f7ca7063544a6c84788799a3275f2f58136423f743d1100fb51d395cc526a7e - malicious (2026-08-09)
- 18433bb34d5b71839f2a2d9076458aa425fa8c36938f2b3abd2abcca9f745f11 - malicious (2026-08-09)
Frequently asked about PolyPatch
- What is PolyPatch?
- PolyPatch is a malware family tracked by MalwareAnalyzer by Cyble across 3 publicly analyzed samples. First seen 2026-08-09, most recently 2026-08-18. Observed ATT&CK techniques include T1105, T1112.
- How many PolyPatch samples have been analyzed?
- MalwareAnalyzer by Cyble holds 3 publicly analyzed samples attributed to PolyPatch, first seen 2026-08-09 and most recently 2026-08-18. This counts public submissions to this platform only, so it is a measure of what we have seen rather than of the family's total prevalence.
- What MITRE ATT&CK techniques does PolyPatch use?
- Across our PolyPatch samples the most frequently observed techniques are T1105 (3), T1112 (2). Counts are the number of analyzed samples in which each technique was observed.
- What file types does PolyPatch use?
- PolyPatch samples in this corpus are distributed as pe (3).
- Is PolyPatch malicious?
- 3 of 3 analyzed PolyPatch samples were scored malicious by the fused verdict, which combines multi-engine static scanning, YARA and hash reputation with behavior captured during real sandbox detonation. Each report lists every signal that contributed to its score.
Latest analyzed threats · ATT&CK coverage across the corpus · Threat trends